changed to use mongoose for the database call, not a parameterized database